CLAIM AMENDMENTS 



Claim Amendment Summary 
Claims pending 

• Before this Amendment: Claims 1 - 29. 

• After this Amendment: Claims 1 - 29 
Non-Elected, Canceled, or Withdrawn claims: none 
Amended claims: 1, 9, 10, 12, 13, 18, 22, 23, and 25-27 
New claims: none 



Claims: 

1. (Currently Amended) A method comprising: 

establishing a n authenticated session between a server and a client; 

authenticating the session; 

subsequent to establishing the authenticated authenticating the session, 
receiving at the server, via the session, a request from the client; 

subsequent to receiving at the server, a -the request from the client, 
determining whether the session is still authenticated: and 

in an event that the session is no longer authenticated^ 

persisting as a pending request at the server, the request from the 

client; and 
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in an event that the session is subsequently re-authenticated, the 
server processing the pending request. 

2. (Original) The method of claim 1 wherein the determining 
comprises verifying an authentication token associated with the client. 

3. (Original) The method of claim 2 wherein the verifying comprises 
verifying that the authentication token has not timed out. 

4. (Original) The method of claim 2 wherein the authentication token 
is a cookie stored by the client. 

5. (Original) The method of claim 2 wherein the authentication token 
is part of the request received from the client. 

6. (Original) The method of claim 2 wherein the authentication token 
is encrypted. 

7. (Original) The method of claim 1 wherein persisting the request 
comprises storing the request in a file. 
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8. (Original) The method of claim 1 wherein persisting the request 
comprises storing the request in a database. 

9. (Currently Amended) The method of claim 1 further comprising, 
after persisting the request, directing the client to authenticate re-authenticate 
the session. 

10. (Currently Amended) The method of claim 9 wherein directing 
the client to authenticate re-authenticate the session comprises: 

directing the client to a login module; and 

directing the client to an address associated with the pending request. 

11. (Original) The method of claim 10 wherein the address associated 
with the pending request is a URL 
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12. (Currently Amended) A method comprising: 

establishing an authenticated authenticating a session between a server 
and a clien t wherein the session is established via a network connection 
between the server and the client ; 

the client submitting a request to the server via the session; 

subsequent to submitting the request, the client receiving an indication 
that the session is no longer authenticated; 

the client obtaining a session re-authentication of the session ; and 

the client receiving an indication that the request has been processed, 
without the client resubmitting the request 

13. (Currently Amended) A server system comprising: 

an authentication verifier configured to determine whether an initially 
authorized session between the server and a client is still authorized; 

a client interface configured to receive a request from the clien t via the 

session ; 

a pending request store configured to maintain the request in an event 
that the session is not authorized; and 

a processing unit configured to process the request that is maintained in 
an event that the session is re-authorized. 
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14. (Previously presented) The system of claim 13 further 
comprising an authentication redirect generator configured to generate an 
instruction to redirect the client to obtain re-authorization for the session. 



15. (Original) The system of claim 14 wherein the instruction is a URL. 

16. (Original) The system of claim 14 wherein the authorization is an 
authentication token. 



17. (Previously presented) An application server comprising the 
server system as recited in claim 13. 



18. (Currently Amended) A server computing system comprising: 
a client interface configured to receive a request from a clien t, wherein the 

request is received via a network connection between the client and the server 

computing system ; 

an authentication token verifier configured to determine whether an 
authentication token associated with the client is valid , wherein the network 
connection between the client and the server computing system remains active ; 

a pending request store configured to store the request in an event that 
the network connection between the client and the server computing system 

Serial No.: 10/081,755 7 A 

Atty Docket No.: MS1-1055US iee@haVeS The Business of )P ™ 

Atty/Agent: Kayla D. Brant 
Response to Final Office Action 



remains active, but the authentication token associated with the client is not 
valid; and 

an authentication redirect generator configured to generate an instruction 
to redirect the client to obtain a valid authentication token while maintaining the 
network connection between the client and the server computing system . 

19. (Original) The system of claim 18 wherein the authentication 
token verifier is further configured to determine whether the authentication 
token has expired. 

20. (Original) The system of claim 18 wherein the authentication 
redirect generator is further configured to direct the client to access the request 
that is stored. 

21. (Original) The system of claim 18 wherein the pending request 
store is a database. 
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22. (Currently Amended) A server system comprising: 

means for receiving a request from a clien t, wherein the request is 
received via a network connection between the server system and the client ; 

means for determining whether an authentication token associated with 
the client is valid , while the network connection between the server system and 
the client remains active ; 

means for storing the request in an event that the authentication token is 
not valid; and 

means for generating an instruction to redirect the client to obtain a valid 
authentication token, wherein the instruction is to be transmitted to the client via 
the network connection . 
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23. (Currently Amended) A system comprising: 
a client; 

an application server configured to: 

establish a session between the application server and the client; 
authenticate the session: 
establish an authenticated se ssion with the c l ient; 
receive a request from the clien t, via the session ; 
maintain the request as a pending request in an event that the 
session is no longer authenticated; and 

direct the client to re-authenticate the session; 
the client being configured to re-authenticate the session by obtaining 
authentication from an authentication entity in response to direction from the 
application server, and the client further configured to subsequently access the 
pending request; and 

upon client access to the pending request, the application server being 
further configured to process the pending request. 

24. (Original) The system of claim 23 wherein the application server 
and the authentication entity are implemented as one server. 
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25. (Currently Amended) One or more computer-readable media 
comprising computer executable instructions that, when executed, direct a 
computing system to: 

establish a network connection between the computing system and a 

client; 

authenticate the client via the network connection; 
establish a session with an authenticoted cl ient; 

subsequent to establishing the session authenticating the client , receive a 
request from the clien t, wherein the request is received via the network 
connection ; 

subsequent to receiving the request, determine whether the client is still 
authenticated; 

in an event the client is still authenticated, process the request; and 
in an event that the client is no longer authenticated! 
rpersist the request; and 

in an event that the client is subsequently re-authenticated, process 
the request that is persisted. 



Serial No.: 10/081,755 
Atty Docket No.: MS1-1055US 
Atty/Agent: Kayla D. Brant 
Response to Final Office Action 



Iee@hayes The Business pf.iP'" 

www.fcelwyesxom 5q9.324.92S6 



26. (Currently Amended) The one or more computer-readable media 
of claim 25 further comprising computer executable instructions that, when 
executed, direct a-the computing system to: 

in the event that the client is no longer authenticated, 
redirect the client to re-obtain authentication; and 
direct the client to the request that is persisted. 

27. (Currently Amended) One or more computer-readable media 
comprising computer executable instructions that, when executed, direct a 
computing system to: 

establish an authenticated a communication session with- between the 
computing system and a client; 

determine that an authentication token associated with the client is valid: 

receive via the communication session, a request from the client; 

determine whether an-the authentication token associated with the client 
is still valid; 




-if the authentication token is no longer valid: 



store the request ;-aftd 



generate an instruction to redirect the clien t: and 



transmit the instruction to the client via the communication session . 
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28. (Original) The one or more computer-readable media of claim 27 
wherein the instruction comprises an instruction to redirect the client to obtain a 
valid authentication token. 



29. (Original) The one or more computer-readable media of claim 28 
wherein the instruction further comprises an instruction to redirect the client to 
the request that is stored upon the client obtaining the valid authentication 
token. 
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